Medium severity5.8NVD Advisory· Published Apr 21, 2026· Updated Apr 23, 2026

CVE-2025-1241

Description

Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decryption of data.

Affected products

Fortra/Goanywhere Agents
cpe:2.3:a:fortra:goanywhere_agents:*:*:*:*:*:*:*:*
Range: <2.2.0
Fortra/Goanywhere Managed File Transfer
cpe:2.3:a:fortra:goanywhere_managed_file_transfer:*:*:*:*:*:*:*:*
Range: <7.10.0
Fortra/GoAnywhere MFTllm-fuzzy
Range: <7.10.0

Patches

Vulnerability mechanics

References

fortra.com/security/advisories/product-security/FI-2026-001nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.377
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000